SQL 查询不适用于准备好的语句 php

Question

我正在尝试创建一个基本的 php 注册表单，但我不知道为什么它不起作用。它一直向我显示 sql 的 if 语句的错误 "error=sqlerror3"，它只是不在 table 上插入值。

这是我的 table（idTmp 有 auto_increment）：

CREATE TABLE `users_tmp` (
  `idTmp` int NOT NULL,
  `ipUser` varbinary(17) NOT NULL,
  `cellUser` int NOT NULL,
  `placeUser` longtext NOT NULL,
  `uidUsers` longtext NOT NULL,
  `emailUsers` longtext NOT NULL,
  `pwdUsers` longtext NOT NULL,
  `dataUser` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
  `stateUser` longtext NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

数据库连接dbh.inc.php:

<?php

$servername = "localhost";
$username = "root";
$password = "123Ciuronay";
$dbname = "icproducoes_users";

$conn = mysqli_connect($servername, $username, $password, $dbname);

if (!$conn){
    die("Connection failed: " .mysqli_connect_error());
}

Php代码：

<?php


if(isset($_POST['registo'])){
    require 'dbh.inc.php';

$username = mysqli_real_escape_string($conn, $_POST['uid']);
$email = $_POST['email'];
$residencia = $_POST ['res'];
$tel = $_POST['tel'];
$check = $_POST['check1'];

//GETS THE IP

$ip = $_SERVER['REMOTE_ADDR'];

// GENEREATES RANDOM PASSOWRD
function genPassword($length = 6) {
    $chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
    $count = mb_strlen($chars);

    for ($i = 0, $result = ''; $i < $length; $i++) {
        $index = rand(0, $count - 1);
        $result .= mb_substr($chars, $index, 1);
        $result = strtoupper($result);
    }
    return $result;
}


$password = genPassword();

if(isset($check)){
$check = "YES";

} else {$check = "NO";}



// INSERTS THE VALUES ON DATABASE
$stateUser = "Active";
$sql = "INSERT INTO users_tmp (`ipUser`, `cellUser`, `placeUser`, `uidUsers`, `emailUsers`, `pwdUsers`, `advertising`, `dataUser`, `stateUser`) VALUES ( ?, ?, ?, ?, ?, ?, ? , now(), ?)";

$stmt = mysqli_stmt_init($conn);
if(!mysqli_stmt_prepare($stmt, $sql)){
    header("Location: ../registo-gratis.php?error=sqlerror3");
    exit();

} else {

    mysqli_stmt_bind_param($stmt, "ssssssss",  $ip , $tel, $residencia, $username, $email, $password, $check, $stateUser);
    mysqli_stmt_execute($stmt);
}
}
else{

    echo'  <script>setTimeout(function () {    
        window.location.href = "../registo-gratis.php"; 
    },5000);</script>";';
}
?>

Answer 1

在您的 INSERT 查询中，您试图修改 advertising 列，该列在您的 CREATE TABLE 查询中不存在。结果，mysqli_stmt_prepare 发现您正在尝试写入一个不存在的列并且 returns 出现错误。

SQL 查询不适用于准备好的语句 php

SQL query not working with prepared statement php

php

mysql

prepared-statement